1589316 - Firefox doesn't let user choose smart card to use for authentication before PIN prompts

Status: UNCONFIRMED

(Core :: Security: PSM, enhancement, P5)

Description

[jofitesi]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0

Steps to reproduce:

I have connected 2 smart cards on my computer.
I have then accessed a website that requires smart card authentication via Firefox.

Actual results:

Firefox prompts for the PINs of both cards and then allows the user to choose the certificate to use for authentication.

Expected results:

The workflow should be reversed. Firefox should first let the user choose which smart card to use for authentication and only then should it prompt for the respective PIN. It is very annoying to insert every card's PIN just to use one of them for the authentication. Google Chrome implements the correct workflow.

Comment 1

[marko.laurits]

It seems to work normally only when both card are inserted at time when the PKCS#11 security module is loaded.
You can unload the module at preferences -> security devices, insert both cards and reload the module.

Of course, it would be nice if the bug would be fixed.